Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-01-24 17:11:04 -05:00
Code Issues Packages Projects Releases Wiki Activity

Disable some legacy drivers

Browse Source 
These were all previously blacklisted for over 2 years.
This commit is contained in:
Raja Grewal 2024-07-20 15:03:21 +10:00
parent c4965ed838
commit 3c720a0715
No known key found for this signature in database
GPG Key ID: 92CA473C156B64C4
3 changed files with 14 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
README.md
View File

@ -226,7 +226,8 @@ disabling should first be blacklisted for a suitable amount of time.
are disabled. are disabled.
- Miscellaneous: Disable an assortment of other modules such as those required - Miscellaneous: Disable an assortment of other modules such as those required
for amateur radio, floppy disks, and vivid. for amateur radio, floppy disks, and vivid. Also disable legacy drivers that
have been entirely replaced by newer drivers.
- Thunderbolt: Disabled as they are often vulnerable to DMA attacks. - Thunderbolt: Disabled as they are often vulnerable to DMA attacks.

6
etc/modprobe.d/30_security-misc_blacklist.conf
View File

@ -26,14 +26,10 @@ blacklist sr_mod
## https://git.launchpad.net/ubuntu/+source/kmod/tree/debian/modprobe.d/blacklist.conf?h=ubuntu/disco ## https://git.launchpad.net/ubuntu/+source/kmod/tree/debian/modprobe.d/blacklist.conf?h=ubuntu/disco
## https://git.launchpad.net/ubuntu/+source/kmod/tree/debian/modprobe.d/blacklist-ath_pci.conf?h=ubuntu/disco ## https://git.launchpad.net/ubuntu/+source/kmod/tree/debian/modprobe.d/blacklist-ath_pci.conf?h=ubuntu/disco
## ##
blacklist ath_pci
blacklist amd76x_edac blacklist amd76x_edac
blacklist asus_acpi blacklist ath_pci
blacklist bcm43xx
blacklist evbug blacklist evbug
blacklist de4x5
blacklist pcspkr blacklist pcspkr
blacklist prism54
blacklist snd_aw2 blacklist snd_aw2
blacklist snd_intel8x0m blacklist snd_intel8x0m
blacklist snd_pcsp blacklist snd_pcsp

11
etc/modprobe.d/30_security-misc_disable.conf
View File

@ -256,6 +256,17 @@ install hamradio /usr/bin/disabled-miscellaneous-by-security-misc
## ##
install floppy /usr/bin/disabled-miscellaneous-by-security-misc install floppy /usr/bin/disabled-miscellaneous-by-security-misc
## ##
## Replaced:
## These legacy drivers have all been entirely replaced and superseded by newer drivers.
## These were all previously blacklisted.
##
## https://git.launchpad.net/ubuntu/+source/kmod/tree/debian/modprobe.d/blacklist.conf?h=ubuntu/disco
##
install asus_acpi /usr/bin/disabled-miscellaneous-by-security-misc
install bcm43xx /usr/bin/disabled-miscellaneous-by-security-misc
install de4x5 /usr/bin/disabled-miscellaneous-by-security-misc
install prism54 /usr/bin/disabled-miscellaneous-by-security-misc
##
## Vivid: ## Vivid:
## Disables the vivid kernel module since it has been the cause of multiple vulnerabilities. ## Disables the vivid kernel module since it has been the cause of multiple vulnerabilities.
## ##